Privacy Policy (External-Facing)

1. Overview

We are committed to protecting the privacy, security, and rights of every individual whose data we handle. This policy explains what information we collect, why we collect it, how we use it, and the choices individuals have regarding their data.

​

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, job title, and other contact details.

• Usage Data: Interactions with our website, platforms, or services (e.g., page views, clicks, device information).

• Client & Partner Data: Information shared with us for the purpose of campaign management, communication, or service delivery.

• Content & Media: Any materials voluntarily provided to us, such as creative assets, briefs, or feedback.

We do not collect sensitive personal data unless explicitly required and agreed upon.

​

3. How We Use Information

We use collected information to:

• Deliver and improve our services

• Manage client relationships and communications

• Execute influencer and marketing campaigns

• Analyse performance and optimise content

• Maintain security and prevent misuse

• Comply with legal or regulatory obligations

• We never sell personal data.

​

4. Legal Basis for Processing

We process data under one or more of the following bases:

• Consent

• Contractual necessity

• Legitimate interest

• Legal obligation

​

5. Data Sharing

We may share data with:

• Trusted service providers (e.g., analytics tools, email platforms)

• Campaign partners or collaborators, when necessary

• Legal authorities, if required by law

All third parties must meet our privacy and security standards.

​

6. Data Retention

We retain data only for as long as necessary to fulfil the purpose it was collected for, or as required by law. When data is no longer needed, it is securely deleted or anonymised.

​

7. Data Security

We implement appropriate technical and organisational measures to protect data from loss, misuse, unauthorised access, or disclosure.

​

8. Individual Rights

Individuals have the right to:

• Access their data

• Request corrections

• Request deletion

• Withdraw consent

• Object to processing

• Request data portability

• Requests can be made via our contact channels and will be handled promptly.

​

9. International Transfers

If data is transferred outside the UK or EEA, we ensure adequate safeguards are in place, such as standard contractual clauses.

​

10. Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be available upon request.

​

11. Contact

For questions or requests regarding this policy, individuals can contact our privacy lead at: philsmith@indigoifm.com